denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Script building fresh certificates

Browse Source
This commit is contained in:
Andreas Steffen
2019-05-08 14:56:48 +02:00
committed by Tobias Brunner
parent 3ee352a691
commit 8db01c6a3f
164 changed files with 2064 additions and 690 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev2/multi-level-ca-ldap/hosts/carol/etc/ipsec.conf
+3 -3
View File
@@ -5,7 +5,7 @@ config setup
ca strongswan
cacert=strongswanCert.pem
crluri="ldap://ldap.strongswan.org/cn=strongSwan Root CA, o=Linux strongSwan, c=CH?certificateRevocationList"
crluri="ldap://ldap.strongswan.org/cn=strongSwan Root CA, o=strongSwan Project, c=CH?certificateRevocationList"
auto=add
conn %default
@@ -18,12 +18,12 @@ conn %default
leftcert=carolCert.pem
right=PH_IP_MOON
[email protected]
rightca="C=CH, O=Linux strongSwan, CN=strongSwan Root CA"
rightca="C=CH, O=strongSwan Project, CN=strongSwan Root CA"
conn alice
rightsubnet=PH_IP_ALICE/32
auto=add
conn venus
rightsubnet=PH_IP_VENUS/32
auto=add
testing/tests/ikev2/multi-level-ca-ldap/hosts/dave/etc/ipsec.conf
+3 -3
View File
@@ -5,7 +5,7 @@ config setup
ca strongswan
cacert=strongswanCert.pem
crluri="ldap://ldap.strongswan.org/cn=strongSwan Root CA, o=Linux strongSwan, c=CH?certificateRevocationList"
crluri="ldap://ldap.strongswan.org/cn=strongSwan Root CA, o=strongSwan Project, c=CH?certificateRevocationList"
auto=add
conn %default
@@ -18,12 +18,12 @@ conn %default
leftcert=daveCert.pem
right=PH_IP_MOON
[email protected]
rightca="C=CH, O=Linux strongSwan, CN=strongSwan Root CA"
rightca="C=CH, O=strongSwan Project, CN=strongSwan Root CA"
conn alice
rightsubnet=PH_IP_ALICE/32
auto=add
conn venus
rightsubnet=PH_IP_VENUS/32
auto=add
testing/tests/ikev2/multi-level-ca-ldap/hosts/moon/etc/ipsec.conf
+10 -10
View File
@@ -5,19 +5,19 @@ config setup
ca strongswan
cacert=strongswanCert.pem
crluri="ldap://ldap.strongswan.org/cn=strongSwan Root CA, o=Linux strongSwan, c=CH?certificateRevocationList"
crluri="ldap://ldap.strongswan.org/cn=strongSwan Root CA, o=strongSwan Project, c=CH?certificateRevocationList"
auto=add
ca research
ca research
cacert=researchCert.pem
crluri="ldap://ldap.strongswan.org/cn=Research CA, ou=Research, o=Linux strongSwan, c=CH?certificateRevocationList"
crluri="ldap://ldap.strongswan.org/cn=Research CA, ou=Research, o=strongSwan Project, c=CH?certificateRevocationList"
auto=add
ca sales
ca sales
cacert=salesCert.pem
crluri="ldap://ldap.strongswan.org/cn=Sales CA, ou=Sales, o=Linux strongSwan, c=CH?certificateRevocationList"
crluri="ldap://ldap.strongswan.org/cn=Sales CA, ou=Sales, o=strongSwan Project, c=CH?certificateRevocationList"
auto=add
conn %default
ikelifetime=60m
keylife=20m
@@ -32,11 +32,11 @@ conn %default
conn alice
leftsubnet=PH_IP_ALICE/32
right=%any
rightca="C=CH, O=Linux strongSwan, OU=Research, CN=Research CA"
rightca="C=CH, O=strongSwan Project, OU=Research, CN=Research CA"
auto=add
conn venus
leftsubnet=PH_IP_VENUS/32
right=%any
rightca="C=CH, O=Linux strongSwan, OU=Sales, CN=Sales CA"
rightca="C=CH, O=strongSwan Project, OU=Sales, CN=Sales CA"
auto=add